
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: +8rGq8/biZqAM05dnlRRiv0MoXMxI4CFJmzYqGsBguU=
Subject key identifier: 02:35:D7:47:86:26:27:59:7E:F6:97:B9:F4:AD:70:52:83:2D:A0:AF
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01988544E99F635E1BDDFD91E1ACA077C8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0B70
Signing time: Thu 07 Aug 2025 16:02:22 +0000
Manifest this update: Thu 07 Aug 2025 16:02:22 +0000
Manifest next update: Fri 08 Aug 2025 16:02:22 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: V25vJ93Qi3Gf+aaj9u+OOIo84vJkv06EmCQ6PaNCeLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:e9:9f:63:5e:1b:dd:fd:91:e1:ac:a0:77:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Aug 7 16:02:22 2025 GMT
Not After : Aug 8 16:02:22 2025 GMT
Subject: CN=0235d747862627597ef697b9f4ad7052832da0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:2c:fb:5b:2b:2c:a6:fc:5d:0f:04:48:bd:
a0:48:80:2d:59:b6:51:20:a3:c3:2b:86:6f:45:47:
de:8a:0c:81:25:a9:41:05:55:bd:d9:06:42:ca:2c:
e9:1f:80:cc:e1:ff:ce:6a:3a:60:c2:77:57:4d:50:
bb:ce:87:77:d4:1a:05:67:48:e8:bc:d5:12:51:a3:
f5:ad:16:45:fc:27:5e:a9:3b:3b:1b:9a:27:79:8e:
0a:0c:15:04:36:96:e4:51:64:53:c4:3f:23:60:24:
be:d6:35:ec:2b:05:1b:04:f7:bf:55:ce:2c:16:1d:
9e:ce:22:76:ee:8c:43:32:32:69:09:e3:64:86:87:
3f:18:de:08:2c:2e:03:96:52:a6:ca:ee:a5:57:ef:
63:e5:05:b0:30:b0:79:f4:f3:78:00:ba:06:3f:e1:
b8:2d:38:d5:47:b4:ff:f9:55:22:9a:e0:b6:b4:8b:
b8:b0:77:fa:6b:6b:3b:0b:ab:8d:ce:b6:46:74:57:
99:1a:72:a1:a6:53:7c:bf:69:0d:35:c8:6b:89:fb:
e8:78:69:41:f7:cc:6c:c0:5c:8f:be:e8:76:58:c4:
58:82:2d:23:c3:a5:c6:33:4d:84:b9:16:dd:06:5f:
60:ac:d7:ff:6b:bb:15:06:57:da:67:47:80:c1:83:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:D7:47:86:26:27:59:7E:F6:97:B9:F4:AD:70:52:83:2D:A0:AF
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:ef:9b:2f:29:18:ec:08:d3:7d:46:03:f2:bf:6c:56:df:
32:d3:33:28:2b:38:24:85:f5:27:0e:64:f0:e2:13:8a:db:3e:
f9:fc:ff:52:e0:c9:e7:c1:5f:cd:f1:56:6f:bc:e0:f7:b5:3f:
80:dc:78:72:db:65:2e:f8:bf:de:a9:05:e2:3a:8b:95:4f:5c:
cc:61:71:0f:3d:f8:fa:1b:b8:bd:38:29:39:96:7c:27:78:6e:
2a:ec:91:d5:2d:8c:c9:db:aa:04:41:1d:a7:83:fa:fe:71:85:
81:7a:32:be:3a:a7:12:d7:90:bd:b4:7e:db:25:4f:55:f6:4d:
b2:eb:b0:7e:f7:c0:c5:3c:6e:18:f3:39:3d:26:b0:a2:6f:28:
9f:2e:3b:d7:ab:89:b1:e8:20:34:e7:53:7b:31:a0:1b:94:be:
6e:a4:1d:78:05:b6:13:65:b1:d6:6c:69:65:56:56:83:83:79:
3b:d1:ad:ba:82:2f:0f:a4:99:1d:d7:e2:af:fd:41:07:68:23:
db:60:a6:b6:5f:82:36:89:a6:4b:76:24:e2:e0:6c:dd:a6:9f:
39:5e:8a:bc:85:20:e6:88:40:09:39:ba:ce:56:6e:67:9c:a4:
0e:a9:90:b8:1f:b0:3c:f1:13:5b:11:4f:46:27:f6:7b:bd:dc:
22:ed:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:27:58 2025 by rpki-client